completely “borrowed” from this site<\/a><\/em><\/p>\n\n\n\n Assume an application with an id 116122545078207<\/em>, and using the URL of the blog (http:\/\/benbiddington.wordpress.com) to collect request tokens.<\/p>\n Following the instructions as specified in section 3.5.1.1., Client Requests Authorization,<\/em> of the specification<\/a>, this is a one-step process:<\/p>\n Open this in a browser:<\/p>\n Note: there are several options for scope. These are called extended permissions<\/a>.<\/p>\n Note: unless you specify offline_access<\/strong>, your tokens will expire as soon as the user signs out of facebook.<\/p>\n Note: client_secret<\/em> is not supplied:<\/p>\n [3.5.1. User-Agent Flow<\/a>] This user-agent flow does not utilize the client secret since the client executables reside on the end user\u2019s computer or device which makes the client secret accessible and exploitable.<\/p><\/blockquote>\n You\u2019ll be redirected to:<\/p>\n And you have your access token, you can go ahead and use it:<\/p>\n According to section 3.5.1. Client Requests Authorization<\/a><\/em>, because we have not supplied the optionalsecret_type:<\/em><\/p>\n <\/p>\n Borrowed from https:\/\/developers.facebook.com\/docs\/reference\/api\/<\/a><\/p>\n At Facebook’s core is the social graph; people and the connections they have to everything they care about. The Graph API presents a simple, consistent view of the Facebook social graph, uniformly representing objects in the graph (e.g., people<\/a>, photos<\/a>, events<\/a>, and pages<\/a>) and the connections between them (e.g., friend relationships, shared content, and photo tags).<\/p>\n Every object in the social graph has a unique ID. You can access the properties of an object by requesting<\/p>\n . For example, the official page for the Facebook Platform<\/a> has id 19292868552, so you can fetch the object at https:\/\/graph.facebook.com\/19292868552<\/a>:<\/p>\n Alternatively, people and pages with usernames can be accessed using their username as an ID. Since “platform” is the username for the page above, https:\/\/graph.facebook.com\/platform<\/a> will return what you expect. All responses are JSON objects.<\/p>\n All objects in Facebook can be accessed in the same way:<\/p>\n All of the objects in the Facebook social graph are connected to each other via relationships. Bret Taylor is a fan of the Coca-Cola page, and Bret Taylor and Arjun Banker are friends. We call those relationships connections<\/em> in our API. You can examine the connections between objects using the URL structure<\/p>\n . The connections supported for people and pages include:<\/p>\n We support different connection types for different objects. For example, you can get the list of all the people attending the Facebook Developer Garage at SXSW (ID #331218348435) by fetchinghttps:\/\/graph.facebook.com\/331218348435\/attending<\/strong>?access_token=…<\/a>.<\/p>\n All of the different types of objects and connections we support are included in the Graph API reference documentation<\/a>. The easiest way to get started is to check out the Graph API Explorer<\/a>.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":" Facebook Graph API \u2014 getting access tokens completely “borrowed” from this site Assume an application with an id 116122545078207, and using the URL of the blog (http:\/\/benbiddington.wordpress.com) to collect request tokens. Following the instructions as specified in section 3.5.1.1., Client Requests Authorization, of the specification, this is a one-step process: Open this in a browser: https:\/\/graph.facebook.com\/oauth\/authorize? type=user_agent& client_id=116122545078207& redirect_uri=http%3A%2F%2Fbenbiddington.wordpress.com& scope=user_photos,email,user_birthday,user_online_presence […]<\/p>\n","protected":false},"author":2,"featured_media":4912,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[28,17],"tags":[],"class_list":["post-462","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-coding","category-technology","clearfix","post-index"],"acf":[],"jetpack_featured_media_url":"https:\/\/corbinrose.com\/blog\/wp-content\/uploads\/2012\/03\/pexels-photo-267399-1.jpeg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/posts\/462","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/comments?post=462"}],"version-history":[{"count":0,"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/posts\/462\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/media\/4912"}],"wp:attachment":[{"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/media?parent=462"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/categories?post=462"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/corbinrose.com\/blog\/wp-json\/wp\/v2\/tags?post=462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}https:\/\/graph.facebook.com\/oauth\/authorize?\n type=user_agent&\n client_id=116122545078207&\n redirect_uri=http%3A%2F%2Fbenbiddington.wordpress.com&\n scope=user_photos,email,user_birthday,user_online_presence<\/pre>\n
http:\/\/benbiddington.wordpress.com\/#access_token=\n 116122545078207|\n 2.1vGZASUSFMHeMVgQ_9P60Q__.3600.1272535200-500880518|\n QXlU1XfJR1mMagHLPtaMjJzFZp4.<\/pre>\n
https:\/\/graph.facebook.com\/me?access_token=\n 116122545078207|\n 2.1vGZASUSFMHeMVgQ_9P60Q__.3600.1272535200-500880518|\n QXlU1XfJR1mMagHLPtaMjJzFZp4.<\/pre>\n
secret_type\n OPTIONAL. The access token secret type as described by \n Section 5.3. If omitted, the authorization server will issue\n a bearer token (an access token without a matching secret) \n as described by Section 5.2.<\/pre>\n
What can you do with the graph?<\/strong><\/h3>\n
https:\/\/graph.facebook.com\/ID<\/pre>\n
{ \n\"name\": \"Facebook Platform\", \n\"website\": \"http:\/\/developers.facebook.com\", \n\"username\": \"platform\", \"founded\": \"May 2007\", \n\"company_overview\": \"Facebook Platform enables anyone to build...\",\n \"mission\": \"To make the web more open and social.\",\n \"products\": \"Facebook Application Programming Interface (API)...\",\n \"likes\": 449921,\n \"id\": 19292868552,\n \"category\": \"Technology\" \n}<\/pre>\n\n
https:\/\/graph.facebook.com\/ID\/CONNECTION_TYPE<\/pre>\n
\n